Aircraft braking system having a high level of availability

Abstract

An aircraft braking system comprising: a first group (Ga) of actuators and a second group (Gb) of actuators. A first control module ( 105 a ) is adapted, in a nominal mode, to control the first group, and in a reconfigured mode, to control the first group and the second group. A second control module ( 105 b ) is adapted, in a nominal mode, to control the second group, and in a reconfigured mode, to control the first group and the second group. A monitoring unit adapted is adapted to monitor the first control module and the second control module, and to put the first control module into the reconfigured mode of operation when the monitoring unit detects a failure of the second control module, and to put the second control module into the reconfigured mode when the monitoring unit detects a failure of the first control module.

The invention claimed is: 
     
       1. An aircraft braking system comprising:
 a first group (Ga) of electromechanical actuators ( 101 ) and a second group (Gb) of electromechanical actuators ( 101 ) arranged to apply a braking force to wheels of an aircraft; 
 a first computerized control module ( 105   a ) adapted to be configured in a nominal mode of operation or in a reconfigured mode of operation, and a second computerized control module ( 105   b ) adapted to be configured in a nominal mode of operation or in a reconfigured mode of operation, the first computerized control module ( 105   a ) being adapted, in the nominal mode of operation, to control the first group of electromechanical actuators, and in the reconfigured mode of operation, to control the first group of electromechanical actuators and the second group of electromechanical actuators, and the second computerized control module ( 105   b ) being adapted, in a nominal mode of operation, to control the second group of electromechanical actuators, and in the reconfigured mode of operation, to control the first group of electromechanical actuators and the second group of electromechanical actuators; and 
 a computerized monitoring unit, which is not directly connected to and does not control the first or second groups of electromechanical actuators, adapted and dedicated to monitor the operation of the first computerized control module and of the second computerized control module, and to configure the first computerized control module into the reconfigured mode of operation when the computerized monitoring unit detects a failure of the second computerized control module by modifying a signal applied on an input of the first computerized control module, and to configure the second computerized control module into the reconfigured mode of operation when the computerized monitoring unit detects a failure of the first computerized control module by modifying a signal applied on an input of the second computerized control module. 
 
     
     
       2. The braking system according to  claim 1 , wherein, when one of the first and second computerized control modules ( 105   a ,  105   b ) is in the reconfigured mode of operation, the other one of the first and second computerized control modules ( 105   a ,  105   b ) is necessarily inhibited, and wherein, when one of the first and second computerized control modules ( 105   a ,  105   b ) is in the nominal mode of operation, the other one of the first and second computerized control modules ( 105   a ,  105   b ) is likewise necessarily in the nominal mode of operation. 
     
     
       3. The braking system according to  claim 1 , wherein the computerized monitoring unit includes a first computerized monitoring module ( 113   a ) arranged to monitor the operation of the first computerized control module ( 105   a ) and a second computerized monitoring module ( 113   b ) arranged to monitor the operation of the second computerized control module ( 105   b ), the first computerized monitoring module ( 113   a ) being adapted, on detecting a failure of the first computerized control module, to cause the second computerized control module to switch into the reconfigured mode, and the second computerized monitoring module ( 113   b ) being adapted, on detecting a failure of the second computerized control module, to cause the first computerized control module to switch into the reconfigured mode. 
     
     
       4. The braking system according to  claim 3 , wherein each of the first and second computerized monitoring modules ( 113   a ,  113   b ) has a discrete output connected both to a discrete input of the first computerized control module ( 105   a ) and to a discrete input of the second computerized control module ( 105   b ), the discrete outputs and inputs being used to cause the first and second computerized control modules ( 105   a ,  105   b ) to switch into the nominal mode of operation and into the reconfigured mode of operation. 
     
     
       5. The braking system according to  claim 4 , wherein each computerized monitoring module of the first and second computerized monitoring modules possesses a plurality of inputs receiving monitoring signals and performs a recombination function on the plurality of inputs, the result of the recombination function being applied to the output of each said first and second monitoring module. 
     
     
       6. The braking system according to  claim 5 , wherein the monitoring signals comprise a software monitoring signal serving to detect an absence of braking in response to a braking setpoint and/or a hardware monitoring signal serving to detect a lack of activity and/or a signal monitoring an output from one of the first and second computerized control modules. 
     
     
       7. The braking system according to  claim 1 , wherein each computerized control module possesses a nominal output used in the nominal mode of operation and in the reconfigured mode of operation, and a reconfigured output used solely in the reconfigured mode of operation, the nominal output of one of the first and second computerized control modules and the reconfigured output of the other of the first and second computerized control modules being connected to electromechanical actuators of the first group of electromechanical actuators or of the second group of electromechanical actuators via an OR unit ( 112 ) that performs a logic OR function on inputs of the OR unit ( 112 ) and that applies the result of the OR function to an output of the OR unit ( 112 ). 
     
     
       8. The braking system according to  claim 1 , wherein each electromechanical actuator ( 101 ) is controlled via an inverter ( 106 ) incorporated in a braking computer ( 102 ) in which the first and second computerized control modules ( 105   a ,  105   b ) are positioned. 
     
     
       9. The braking system according to  claim 1 , wherein each electromechanical actuator ( 101 ) is controlled via an inverter ( 106 ) incorporated in the electromechanical actuator ( 101 ).